Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft
File:                     157F6108533B10B33C69A854D184113D2CC781E1.mft (raw, json)
Hash identifier:          CODQusvbdcpMeVFp/1jYpO6IJAirRPtPSHOMOCCCxwA=
Subject key identifier:   E1:1E:82:32:52:65:76:C0:22:8E:50:2D:03:7A:15:36:C0:E8:CA:13
Authority key identifier: 15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1
Certificate issuer:       /CN=157F6108533B10B33C69A854D184113D2CC781E1
Certificate serial:       7D054EB2221FF4E93F72D295B5A6709F541D4877
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft
Manifest number:          A1
Signing time:             Sat 26 Apr 2025 15:05:59 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:58 +0000
Manifest next update:     Sun 27 Apr 2025 18:04:58 +0000
Files and hashes:         1: 323830343a313564343a3a2f33322d3332203d3e20323633343133.roa (hash: vBSNV3n807UTlt3z4BSTJKuTzDH3XzY14LVVXZckQWM=)
                          2: 323830343a313564343a343030303a3a2f33342d3334203d3e20323633343133.roa (hash: k8t9YHu5MSFLNMzZSTlBcswXAyzjRYSSWCxu4rkBF9Y=)
                          3: 157F6108533B10B33C69A854D184113D2CC781E1.crl (hash: PynIAg0Y3/s3YWW3DPqqRDPnKuz5PwXzIFN8qY1jyTs=)
                          4: 3137392e39372e38382e302f32312d3234203d3e20323633343133.roa (hash: Y/wiATdU3nHyIiu4s0K+VFRJ+dN0VV132KuRIg4AoeA=)
                          5: 323830343a313564343a633030303a3a2f33342d3334203d3e20323633343133.roa (hash: Rad2Prkofo8mizBslH9mBoBQ79sBzLHxncdQDiKpdyc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:05:4e:b2:22:1f:f4:e9:3f:72:d2:95:b5:a6:70:9f:54:1d:48:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157F6108533B10B33C69A854D184113D2CC781E1
        Validity
            Not Before: Apr 26 15:00:58 2025 GMT
            Not After : Apr 27 18:04:58 2025 GMT
        Subject: CN=E11E8232526576C0228E502D037A1536C0E8CA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:9f:28:2b:5a:6a:e2:13:3d:5f:52:b8:72:
                    06:b1:19:6e:bb:98:1c:3c:1b:a5:d3:77:dd:9d:dd:
                    3c:3a:05:7c:15:5b:03:ee:05:b3:9e:d5:54:90:f5:
                    5c:02:1f:7c:b5:62:9e:4b:3b:4c:2b:ac:b6:37:47:
                    f0:29:c9:12:cc:64:3a:7c:9a:9f:7f:70:e4:99:14:
                    ad:af:6e:a6:2d:bb:4c:2c:ed:97:a5:eb:f2:e7:b4:
                    c5:ee:85:0c:72:c9:00:44:43:17:c9:75:89:fd:45:
                    ac:67:c3:88:7c:7a:79:e3:73:05:e6:ef:dc:76:6a:
                    66:f1:5f:bd:16:2e:ef:ce:11:9c:03:58:f5:10:e4:
                    86:9d:52:6f:10:ff:fa:17:9b:45:f8:b9:b4:c9:eb:
                    cf:2f:e6:e9:26:9c:56:c0:6e:28:bd:e6:58:7b:60:
                    5c:82:65:27:89:dc:7a:b4:4a:78:64:23:42:c1:78:
                    2b:f6:2d:27:41:47:6a:45:ab:71:84:c3:b0:69:0b:
                    05:5d:b9:2c:8b:3f:8b:7b:58:cf:08:ac:4e:bd:1e:
                    39:f9:9b:7c:f6:0f:7b:a1:b4:0e:34:93:ca:02:e1:
                    c3:b9:82:1d:7f:bd:3a:da:1f:75:a8:57:9b:e8:f0:
                    d4:39:f2:df:13:b4:80:a2:99:72:05:31:7d:58:b8:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1E:82:32:52:65:76:C0:22:8E:50:2D:03:7A:15:36:C0:E8:CA:13
            X509v3 Authority Key Identifier:
                keyid:15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:27:d8:7f:47:93:6b:2c:e3:66:8f:15:37:0b:fc:a7:af:cc:
         49:4a:3d:1a:24:54:a3:98:3b:75:8b:3c:56:7c:57:b0:ef:fa:
         ee:ce:f0:b0:e9:af:b4:69:6f:61:a1:2a:5b:0a:ea:aa:77:93:
         ef:83:65:85:1a:42:be:02:be:2d:2e:65:52:8b:de:56:2c:2a:
         8f:f5:6e:f2:64:ee:0b:00:06:a0:43:d7:9d:7a:88:f8:0e:ca:
         cc:93:c2:bc:e7:8c:92:65:d3:14:53:a7:7c:ca:2e:29:d3:0f:
         de:a7:17:3e:13:dc:cd:20:b0:c1:e2:cc:7f:85:4c:7f:7f:5b:
         01:ec:f1:0e:5b:bc:91:75:6f:93:a5:95:69:2d:11:b2:52:0d:
         91:ce:da:c9:e5:83:45:93:8e:05:3c:78:98:29:fd:48:19:02:
         57:22:37:27:7e:f0:96:2a:d0:ef:31:8d:3f:ba:ca:be:a3:53:
         7c:a2:7d:b4:43:b3:12:65:9d:8f:e0:74:db:e5:2b:07:a8:aa:
         e9:a0:ba:ff:0b:e5:45:18:c4:fc:ce:ed:b3:76:2e:fc:92:60:
         26:f9:5a:c9:de:dc:48:26:19:57:35:4f:8f:e0:c6:00:28:1b:
         b0:8e:1f:08:02:ca:c5:af:f9:bc:66:8d:47:84:90:37:ce:ce:
         0e:37:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:14 2025 by rpki-client on console.sobornost.net